$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8CB0/3770124E6BC511ED866A7D5EC4F9AE02/F11BA4EA75B811EDA34F9687C4F9AE02.roa File: F11BA4EA75B811EDA34F9687C4F9AE02.roa (raw, json) Hash identifier: ZxJWdKT+dhhJyfungVSpx3334JD5sGMO+S5A+zHFl74= Subject key identifier: 9D:53:D3:57:5A:69:76:8C:18:D6:4D:65:8F:C0:01:C3:BF:7D:B0:D9 Certificate issuer: /CN=A91E8CB0/serialNumber=AFA6D7BDC37B64C8F146EEA61736D3D45178FB37 Certificate serial: 0197 Authority key identifier: AF:A6:D7:BD:C3:7B:64:C8:F1:46:EE:A6:17:36:D3:D4:51:78:FB:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8CB0/3770124E6BC511ED866A7D5EC4F9AE02/F11BA4EA75B811EDA34F9687C4F9AE02.roa Signing time: Thu 09 Jan 2025 02:16:33 +0000 ROA not before: Thu 09 Jan 2025 02:16:33 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 133876 IP address blocks: 103.44.148.0/24 maxlen: 24 203.16.200.0/24 maxlen: 24 203.16.201.0/24 maxlen: 24 203.16.202.0/24 maxlen: 24 203.16.203.0/24 maxlen: 24 2400:bf20::/36 maxlen: 36 2400:bf20:1000::/36 maxlen: 36 2400:bf20:2000::/36 maxlen: 36 2400:bf20:3000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8CB0/3770124E6BC511ED866A7D5EC4F9AE02/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.crl rsync://rpki.apnic.net/member_repository/A91E8CB0/3770124E6BC511ED866A7D5EC4F9AE02/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 02:24:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 407 (0x197) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8CB0 Validity Not Before: Jan 9 02:16:33 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=677f3180-0486 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:9f:48:2f:f2:d5:0c:9e:d5:ae:66:f3:eb:c0: 9c:1d:2b:85:6b:f2:57:51:3b:47:75:62:b4:f1:00: 04:35:56:46:bb:f3:54:56:27:75:10:76:be:83:e4: f2:c5:bc:1e:d2:74:b3:38:c2:61:9a:76:ba:d0:c3: d8:46:1e:16:68:50:20:5e:eb:af:cd:15:f5:31:b7: 4f:5c:32:59:b8:25:54:a8:e3:b5:c5:3c:67:87:9c: 4f:c4:99:84:e5:3a:a7:56:54:60:86:cf:97:39:83: 51:68:7e:7f:58:67:3f:54:59:81:60:4f:3e:8e:96: 8a:6c:3d:64:bc:fa:09:53:60:23:e1:f0:56:d5:2d: 63:53:9d:68:7d:ee:27:46:55:18:e1:97:6d:da:35: 56:5a:8e:0b:18:db:46:88:c1:bf:fd:68:67:60:2a: 5c:69:ad:fa:65:94:ea:67:49:91:c2:d4:71:31:91: 65:d3:16:bc:43:51:cf:ab:ed:06:18:c7:51:5a:4f: 59:65:2c:a8:4a:3c:76:7d:bd:a6:0e:3f:6b:59:48: bd:8e:3b:c5:9c:df:93:c8:1a:9d:c0:29:11:c2:73: a4:1b:15:19:2e:2f:db:14:da:a5:23:f2:99:ef:35: 11:65:91:61:04:a6:c5:9e:8d:2d:63:26:85:23:bc: 37:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:53:D3:57:5A:69:76:8C:18:D6:4D:65:8F:C0:01:C3:BF:7D:B0:D9 X509v3 Authority Key Identifier: keyid:AF:A6:D7:BD:C3:7B:64:C8:F1:46:EE:A6:17:36:D3:D4:51:78:FB:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8CB0/3770124E6BC511ED866A7D5EC4F9AE02/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8CB0/3770124E6BC511ED866A7D5EC4F9AE02/F11BA4EA75B811EDA34F9687C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.44.148.0/24 203.16.200.0/22 IPv6: 2400:bf20::/34 Signature Algorithm: sha256WithRSAEncryption 18:81:f9:bb:8a:e1:bf:32:c9:80:62:12:96:40:00:99:ef:a7: 2c:16:65:51:02:cb:05:7e:08:82:ab:10:28:92:f9:b0:b4:70: 83:08:50:d0:27:95:3b:59:3c:98:0e:1c:57:42:c9:40:38:09: a6:a1:8d:31:b5:d9:6b:7c:7d:b1:92:76:9d:46:78:20:bf:68: 44:57:a7:f9:8d:0b:2c:ab:5a:49:87:34:cc:c7:b6:8b:a0:29: 02:14:c5:8c:4c:09:3e:9b:ef:06:d5:30:ce:cb:03:a0:e8:cd: 3e:73:d3:43:59:cc:d9:d7:52:f8:c0:4b:be:d2:74:d5:66:3c: 10:b6:5e:c8:cf:86:56:3f:ee:20:c8:1c:12:77:56:50:94:90: fe:6f:b3:27:80:6c:76:62:1c:17:b0:6b:f5:2c:90:d1:53:ec: 0d:ac:df:86:75:94:91:29:3d:0a:ea:71:d1:52:63:6d:e3:23: 77:e9:6f:d3:e5:f4:9d:e8:b8:f3:ae:5c:89:93:ca:40:eb:23: 77:6a:28:74:34:af:72:25:74:34:e4:da:fc:c2:a6:e4:65:3a: c0:26:67:6f:c5:06:13:4b:d4:19:50:30:d2:bb:0b:29:8e:2a: 64:b6:a7:1f:7f:87:b3:f6:b7:9a:34:41:34:27:17:ce:00:44: d9:a2:97:86 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICAZcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThDQjAxMTAvBgNVBAUTKEFGQTZEN0JEQzM3QjY0QzhGMTQ2RUVBNjE3MzZEM0Q0 NTE3OEZCMzcwHhcNMjUwMTA5MDIxNjMzWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzdmMzE4MC0wNDg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApp9IL/LVDJ7Vrmbz68CcHSuFa/JXUTtHdWK08QAENVZGu/NUVid1EHa+g+Ty xbwe0nSzOMJhmna60MPYRh4WaFAgXuuvzRX1MbdPXDJZuCVUqOO1xTxnh5xPxJmE 5TqnVlRghs+XOYNRaH5/WGc/VFmBYE8+jpaKbD1kvPoJU2Aj4fBW1S1jU51ofe4n RlUY4Zdt2jVWWo4LGNtGiMG//WhnYCpcaa36ZZTqZ0mRwtRxMZFl0xa8Q1HPq+0G GMdRWk9ZZSyoSjx2fb2mDj9rWUi9jjvFnN+TyBqdwCkRwnOkGxUZLi/bFNqlI/KZ 7zURZZFhBKbFno0tYyaFI7w30wIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFJ1T01da aXaMGNZNZY/AAcO/fbDZMB8GA1UdIwQYMBaAFK+m173De2TI8Ubuphc209RRePs3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOENCMC8zNzcwMTI0RTZC QzUxMUVEODY2QTdENUVDNEY5QUUwMi9yNmJYdmNON1pNanhSdTZtRnpiVDFGRjQt emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I2Ylh2Y043Wk1qeFJ1Nm1GemJUMUZGNC16Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RThDQjAvMzc3MDEyNEU2QkM1MTFFRDg2NkE3RDVFQzRGOUFFMDIvRjExQkE0RUE3 NUI4MTFFREEzNEY5Njg3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNQYIKwYBBQUHAQcBAf8E JjAkMBIEAgABMAwDBABnLJQDBALLEMgwDgQCAAIwCAMGBiQAvyAAMA0GCSqGSIb3 DQEBCwUAA4IBAQAYgfm7iuG/MsmAYhKWQACZ76csFmVRAssFfgiCqxAokvmwtHCD CFDQJ5U7WTyYDhxXQslAOAmmoY0xtdlrfH2xknadRnggv2hEV6f5jQssq1pJhzTM x7aLoCkCFMWMTAk+m+8G1TDOywOg6M0+c9NDWczZ11L4wEu+0nTVZjwQtl7Iz4ZW P+4gyBwSd1ZQlJD+b7MngGx2YhwXsGv1LJDRU+wNrN+GdZSRKT0K6nHRUmNt4yN3 6W/T5fSd6LjzrlyJk8pA6yN3aih0NK9yJXQ05Nr8wqbkZTrAJmdvxQYTS9QZUDDS uwspjipktqcff4ez9reaNEE0JxfOAETZopeG -----END CERTIFICATE-----Generated at Sat Apr 5 01:58:10 2025 by rpki-client